International Journal of Engineering Sciences & Research Technology (IJESRT)
The code emulator should have the ability to run the virus code being analyzed in an emulated environment. In this way, there is a strong chance that the virus will expose itself about its functionalities. With the help of virtual flags and registers, the code emulator will execute the instruction set of the CPU. Code emulation may be a costly solution. This technique proved itself useful for the detection of complex viruses and its related forms. To implement a metamorphic virus identifier though code emulation it is required to take care about code obfuscation techniques.